Its small scope and clear license keep it inspectable. The repository has no tests or security process, and its one-person project shows no activity since 2019.
34%
Total Score
0
50
50
The package has made only two releases, both in May 2019, with no release in more than seven years. That is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving current maintenance unverified.
The artifact includes a usable README and this compact library does not require tests or a changelog in the published package. However, the linked repository also reports no tests, reducing confidence in changes to serial communication behavior.
The repository has 1 star and no forks, providing little evidence of broad adoption or community support. Low popularity is supporting evidence rather than a verdict by itself.
Composer is used for builds, but no security scanning tools are configured. This is a meaningful transparency and maintenance gap, though it does not by itself show that the release is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.